Keep the old decrypt process for migration purposes

See the README.md file for migration steps.

@neilmiddleton: this should fit your migration.